CVEvulnerability

CVE-2024-6060

9.3 CRITICAL Published 2024-06-25 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-06-25
Last modified
2026-06-17
Assigner
103e4ec9-0a87-450b-af77-479448ddef11
CVSS 4.0 (103e4ec9-0a87-450b-af77-479448ddef11)
9.3 CRITICAL — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red
Weaknesses
CWE-532

Description

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References